Facial images are biometric data under several laws including Illinois BIPA and GDPR Article 9, and collection of such data — even with a stated limited purpose — creates significant legal exposure and requires explicit consent in many jurisdictions.
Epic Games collects a wide range of personal data including gameplay behavior, device identifiers, IP address, payment details, voice chat snippets, and facial images, and shares this data with third-party ad partners, platform providers, and service vendors. Children are placed in restricted 'Cabined Accounts' with limited data collection, but parental consent unlocks a significantly broader data profile similar to adult accounts. You can manage your privacy rights, including data deletion and account closure, through Epic's Privacy Settings at epicgames.com or by submitting a request via the contact information in Section 12 of the policy.